Terms of sale

Last updated: · 16 articles

These terms of sale (the “Terms of Sale”) govern the hairdressing services performed by AMAZING LOCKS (the “Publisher”) under the trade name AMAZING LOCKS, whether requested through the amazing-locks.com website (the “Website”) or directly at the salon.

Article 1 —Purpose and scope

The purpose of the Terms of Sale is to set out the rights and obligations of the Publisher and the Client in connection with the request, booking, performance and payment of a Service. They apply to every Service, however it was requested, to the exclusion of any other terms.

They are brought to the Client’s attention before any booking and remain available at all times from the footer of the Website, where they may be consulted, saved and printed. Confirmation of an appointment entails their full and unreserved acceptance.

They supplement the Terms of use, which govern the use of the Website, and the Privacy Policy. In the event of any conflict, the specific terms agreed in writing when an appointment is confirmed prevail over the Terms of Sale.

Article 2 —Definitions

For the purposes of the Terms of Sale, the following capitalised terms have the meanings set out below:

  • Publisher: the person who carries on the hairdressing business under the trade name AMAZING LOCKS and performs the Services;
  • Client: any natural person who requests or obtains a Service; a Client acting for purposes outside their trade or profession is a consumer;
  • Service: any hairdressing, hair care or hair styling service performed by the Publisher;
  • Project: the description of the Service sought — length, volume, texture and condition of the hair, any references — as provided by the Client;
  • Session: the appointment during which all or part of the Service is performed;
  • Deposit: the sum paid by the Client to book a Session, to be set against the price of the Service;
  • Client Area: the personal area available to the Client on the Website after authentication, where this feature is offered.

Article 3 —Identification of the Publisher

The Services are performed by AMAZING LOCKS, working as a hairdresser under the trade name AMAZING LOCKS.

Any request relating to a Service may be sent to the Publisher through the contact form on the Website.

Article 4 —Services offered

The Publisher performs the hairdressing Services presented on the Website, whose description and duration are given for information only; the actual length of a Session depends in particular on the length, volume and condition of the Client’s hair.

Every Service remains subject to the Publisher’s professional judgement; the Publisher may suggest adapting a Project in order to preserve the health of the hair and scalp and to ensure that it lasts. The Publisher may refuse or postpone a Service that cannot be carried out under satisfactory conditions, in particular because of the condition of the hair or scalp.

Article 5 —Appointment request and confirmation

The Client requests an appointment through the Website’s features or through a third-party booking service reached via the “Book” button, the use of which is governed by its own terms.

An appointment request constitutes a booking only after express confirmation by the Publisher, given in writing, in particular by e-mail or through the Website’s messaging. The confirmation states the date and time of the Session, the Service and, where applicable, its price and the amount of the Deposit. The contract is formed on the date of that confirmation.

The confirmed appointment can be viewed in the Client Area where this feature is offered. It is personal and may not be transferred to a third party without the Publisher’s consent.

Article 6 —Prices

Prices shown on the Website are indicative, where applicable in the form of a “from” price; the price of a Service is specified before the Session, depending in particular on the length, volume and condition of the Client’s hair.

Prices are stated in euros, inclusive of all taxes.

The price specified when the appointment is confirmed is firm. Any change to the Project requested by the Client during the Session, or made necessary by a condition of the hair that had not been disclosed, may lead to an adjustment of the price, which the Client accepts before the Service continues.

Article 7 —Deposit, rescheduling and cancellation

A deposit of 30 % is required to book an appointment. It is paid online on Planity when booking, and deducted from the price of the service.

A cancellation requested less than 6 hours before the appointment, or a no-show, means the salon keeps the deposit. Requested earlier, cancellation is free of charge. For a delay of more than fifteen minutes, a fee of €10 may be charged.

If the salon has to cancel an appointment, the deposit is carried over or refunded in full, as the client prefers.

These provisions apply without prejudice to the rights that a Client acting as a consumer derives from the mandatory provisions of the French Consumer Code, in particular the right of withdrawal described below.

Article 8 —Payment

The price, less any Deposit, is paid by the means of payment presented on the Payment methods page.

No bank card data is collected or stored by the Website: any online payment is made on the secure page of the payment provider concerned.

Article 9 —Receipt and invoice

A receipt may be sent to the Client by e-mail after each payment.

A bill or invoice is given to the Client under the conditions laid down by the regulations, and at any time on request. Where this feature is offered, it can also be viewed in the Client Area. Invoices are kept by the Publisher for the statutory period of ten years.

Article 10 —Right of withdrawal

Where the contract is concluded at a distance, in particular by booking an appointment and paying a Deposit online, a Client acting as a consumer has fourteen days from the confirmation of the appointment to exercise their right of withdrawal, without giving any reason (Articles L.221-18 et seq. of the French Consumer Code).

The Client exercises this right by sending the Publisher, before that period expires, an unequivocal statement of their decision to withdraw, through the contact form on the Website. The Client may use the model form reproduced below, but is not obliged to.

In the event of withdrawal, the Publisher refunds the Deposit and any sum paid no later than fourteen days from the day on which it is informed of the Client’s decision, using the same means of payment as for the initial transaction, unless the Client expressly agrees otherwise.

Where the Client expressly asks for the Session to take place before the withdrawal period expires, the Client acknowledges that a Service fully performed before the end of that period can no longer be withdrawn from (Article L.221-28, 1°, of the French Consumer Code); if the Client withdraws after the Session has begun, they pay an amount proportionate to the service provided until they communicated their decision (Article L.221-25 of the same Code).

Model withdrawal form

To AMAZING LOCKS, AMAZING LOCKS:

I hereby give notice that I withdraw from the contract for the provision of the following service:

Service: …………………………… · Appointment confirmed on: ……………

Name of client: …………………………… · Address of client: ……………………………

Date: …………… · Signature of client (only if this form is notified on paper)

Article 11 —Products and allergies

The products used during the Services are cosmetic products intended for professional use, complying with Regulation (EC) No 1223/2009 of 30 November 2009 on cosmetic products.

The Client undertakes to inform the Publisher, before the Session, of any known allergy or intolerance, any previous reaction to a hair product and any condition or sensitivity of the scalp. Before a colouring or chemical treatment, the Publisher may carry out or request a tolerance test, and may postpone or refuse the Service in the light of its result.

Hair products offered for sale at the salon are sold at the displayed prices. The Client benefits from the legal guarantee of conformity (Articles L.217-3 et seq. of the French Consumer Code) and the guarantee against hidden defects (Articles 1641 et seq. of the French Civil Code); a purchase made at the salon does not give rise to a right of withdrawal.

Article 12 —Photographs

The Publisher may photograph the finished hairstyle. Publication of a photograph in which the Client is recognisable is subject to their consent; the Client may at any time request its removal through the contact form.

Article 13 —Liability

The Publisher performs the Services with the care and diligence of a professional, in compliance with the hygiene and safety rules applicable to hairdressing. Since the result of a Service and how well it lasts depend in particular on the nature and condition of the Client’s hair and on compliance with the care advice given to them, the Publisher is bound in this respect by an obligation of means.

The Publisher shall not be liable where the Client fails to follow the recommendations given to them, provides inaccurate or incomplete information about their state of health, or in the event of force majeure within the meaning of Article 1218 of the French Civil Code.

The foregoing limitations do not apply to personal injury, nor in the event of gross negligence or wilful misconduct by the Publisher, and apply within the limits permitted by law.

Article 14 —Personal data

The data provided by the Client for the booking, performance and payment of the Services are processed in accordance with the Privacy Policy, which sets out in particular the purposes and legal bases of the processing, the retention periods, the recipients and how to exercise one’s rights.

Article 15 —Complaints and mediation

Any complaint relating to a Service may be sent to the Publisher through the contact form on the Website, stating the date of the Session and the subject of the complaint, with a view to reaching an amicable solution.

Article 16 —Governing law and jurisdiction

The Terms of Sale are governed by French law. They are drawn up in French and translated into the other languages of the Website; in the event of any discrepancy, the French version prevails.

Failing amicable resolution, any dispute shall be brought before the competent French courts. A Client acting as a consumer may, at their choice, bring proceedings before any of the courts having territorial jurisdiction under the French Code of Civil Procedure or before the court of the place where they resided at the time the contract was concluded or the harmful event occurred (Article R.631-3 of the French Consumer Code).

amazing-locks.com/en/terms-of-sale/End of document · Terms of sale

Terms of use

Last updated: · 16 articles

These terms of use (the “Terms”) set out the conditions under which the amazing-locks.fr website (the “Website”), published by AMAZING LOCKS (the “Publisher”), is made available to its users, and the rights and obligations of each party in that context.

1.Purpose

The purpose of the Terms is to set out the terms and conditions of access to and use of the Website, whatever the device and means of access used. They apply to all pages, language versions, features and content of the Website, including its forms, its messaging and, where offered, its client area.

The purpose of the Website is to present the Publisher’s hairdressing business — a salon specialising in locs, operated under the trade name AMAZING LOCKS —, its work and services, and to enable the User to contact the Publisher and book an appointment. It is not intended for the online sale of goods.

2.Definitions

For the purposes of the Terms, the following capitalised terms have the meanings set out below:

  • Publisher: the person who publishes the Website and operates the hair salon under the trade name AMAZING LOCKS;
  • Website: the website available at amazing-locks.fr, in all its language versions;
  • User: any natural person who accesses or uses the Website, in any capacity whatsoever;
  • Client: any User who requests or obtains an appointment or a service from the Publisher;
  • Content: all items present on the Website, in particular texts, photographs, videos, logos, distinctive signs, graphic elements and software;
  • Client Area: the personal area available to the Client after authentication, where this feature is offered.

3.Publisher of the Website

The Website is published by AMAZING LOCKS, operating the Amazing Locks hair salon.

The Publisher may be contacted through the Website’s contact form.

The Website is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States.

4.Acceptance of the Terms

Accessing and using the Website entails full acceptance of the Terms in force on the date of consultation. Users who do not accept all or part of the Terms are asked to refrain from using the Website.

The Terms are available at all times from the footer of the Website; they may be consulted, saved and printed by the User.

Certain features may be subject to specific conditions, brought to the User’s attention when they are used; in the event of any conflict, the specific conditions prevail over the Terms.

5.Access to the Website

The Website is accessible free of charge to any User with internet access. The costs of accessing the Website, in particular hardware, software and connection costs, are borne solely by the User.

The Publisher endeavours to keep the Website accessible at all times, without any obligation of result. Access may be suspended, limited or interrupted at any time, in particular for maintenance, updates, security reasons or in the event of force majeure, without such suspension giving rise to any compensation.

The Publisher reserves the right to refuse or restrict, without notice, access to the Website or to some of its features for any User who fails to comply with the Terms.

6.User obligations

The User undertakes to use the Website fairly, in accordance with its purpose, with the Terms and with the laws and regulations in force. In particular, the User shall not:

  • provide information that is inaccurate, incomplete or belongs to a third party;
  • transmit, through the contact form, the messaging or the client area, content that is unlawful, insulting, defamatory, discriminatory, contrary to public decency or that infringes the rights of third parties, in particular their image rights;
  • interfere with the operation, security or integrity of the Website, in particular by introducing malicious software, attempting unauthorised access or sending automated requests;
  • systematically extract or reuse all or part of the Content, in particular by means of robots or scraping tools;
  • use the Website for unauthorised commercial prospecting, advertising or solicitation.

The User warrants holding the necessary rights to the items, in particular photographs, that the User sends to the Publisher, and indemnifies the Publisher against any third-party claim in that respect.

7.Intellectual property

The Website and all Content are protected by the provisions of the French Intellectual Property Code and by the applicable international conventions. The author of a work of the mind enjoys in that work, by the mere fact of its creation, an exclusive incorporeal property right enforceable against all persons (Article L.111-1 of the French Intellectual Property Code).

Unless otherwise stated, the Content is the exclusive property of the Publisher. The photographs and creations presented on the Website are protected works.

In accordance with Article L.122-4 of the French Intellectual Property Code, any full or partial performance or reproduction made without the consent of the author or the author’s successors in title is unlawful; the same applies to translation, adaptation or transformation, arrangement or reproduction by any art or process whatsoever. In particular, reproducing the photographs of work presented on the Website is prohibited without the Publisher’s prior written authorisation.

Any unauthorised use is liable to constitute an infringement punishable under Articles L.335-2 et seq. of the French Intellectual Property Code, without prejudice to any damages.

The name AMAZING LOCKS, the logo and the Publisher’s distinctive signs may not be reproduced or used without the Publisher’s authorisation. Sharing a hyperlink to a page of the Website is permitted, provided that it does not harm the Publisher’s image and does not embed the Website within the pages of another website.

8.Content and photographs

The photographs of hairstyles published on the Website show work carried out by the Publisher. The Publisher ensures that their publication respects the right to privacy and the image rights of the persons shown (Article 9 of the French Civil Code).

Any person who considers themselves recognisable in a photograph published on the Website and wishes to have it removed may request this through the contact form; the photograph concerned is removed as soon as possible.

Photographs and information sent by the User, in particular to illustrate the requested service, are used solely to handle the User’s request; they are neither published nor disclosed to third parties without the User’s consent.

The information on the Website, in particular descriptions of services, indicative durations and advice, is provided for information purposes only and may change without notice.

9.Booking appointments

The Website allows the User to contact the Publisher. Appointments are booked exclusively online, through the third-party booking service Planity, reached via the “Book” button, the use of which is governed by its own terms.

An appointment is booked only once the Client receives the confirmation e-mail. The Publisher reserves the right to decline a request, in particular where the requested service does not fall within its business or where the required hygiene and safety conditions cannot be met.

Prices shown on the Website are indicative, where applicable in the form of a “from” price; the price of a custom service is specified before it is performed.

10.Client Area

Where offered, the Client Area is accessed with a valid e-mail address, by means of a password chosen by the Client, by means of a time-limited sign-in link sent to that address or, at the Client’s choice, through a third-party authentication service (Google or Apple, where the Website offers it). The password is stored by the Website only as an irreversible encrypted hash.

The Client is responsible for keeping their password and the links sent to them confidential and for the use of their Client Area; any action carried out from it is deemed to have been carried out by the Client. The Client undertakes to inform the Publisher without delay of any unauthorised use of which they become aware.

The Publisher reserves the right to suspend or close the Client Area in the event of a breach of the Terms. The Client may request its deletion at any time through the contact form; the Client’s data are then processed in accordance with the privacy policy.

11.Liability

The Publisher uses the reasonable means at its disposal to ensure that the information published on the Website is accurate and up to date, and reserves the right to change its content at any time without notice. It cannot, however, guarantee the accuracy, precision or completeness of that information.

Advice on caring for locs published on the Website is general in nature and does not replace the opinion of a health professional; in the event of irritation, an allergic reaction or persistent pain, the User should consult a doctor.

The Publisher shall not be liable for any unavailability, interruption or malfunction of the Website, for damage resulting from fraudulent intrusion by a third party or from contamination of the User’s device, for use of the Website not in accordance with the Terms, or in the event of force majeure within the meaning of Article 1218 of the French Civil Code.

The foregoing limitations of liability do not apply in the event of gross negligence or wilful misconduct by the Publisher, nor to personal injury, and apply within the limits permitted by law.

12.Hyperlinks

The Website may contain links to third-party websites or services, in particular social networks, messaging, booking, payment or mapping services. These websites and services, over which the Publisher has no control, are governed by their own terms of use and privacy policies.

The Publisher shall not be liable for the content, availability or practices of those websites and services, nor for any damage resulting from their use. The existence of a link to a third-party website does not constitute an endorsement or validation of its content.

13.Personal data

The processing of personal data carried out in connection with the use of the Website is described in the Privacy Policy, which forms an integral part of the Terms. There the User will find, in particular, the purposes and legal bases of the processing, the retention periods, the recipients of the data and how to exercise their rights.

14.Changes to the Terms

The Publisher reserves the right to amend the Terms at any time, in particular to adapt them to changes in the Website, its services or the regulations. The amended Terms come into force when they are published online; the date of the latest update appears at the top of this document.

The applicable Terms are those in force on the date the Website is consulted; confirmed appointments remain governed by the conditions brought to the Client’s attention when they were confirmed.

15.Miscellaneous

If any provision of the Terms is held to be void or unenforceable pursuant to a law, a regulation or a final court decision, it shall be deemed unwritten, and the other provisions shall retain their force and effect.

The Publisher’s failure at any time to enforce any provision of the Terms shall not be construed as a waiver of its right to enforce it subsequently.

The Terms are drawn up in French and translated into the other languages of the Website; in the event of any discrepancy, the French version prevails.

16.Governing law and jurisdiction

The Terms are governed by French law.

In the event of a dispute relating to their interpretation, validity or performance, the User is invited first to send a written complaint to the Publisher through the contact form, with a view to reaching an amicable solution.

Failing amicable resolution, any dispute shall be brought before the competent French courts. A Client acting as a consumer may, at their choice, bring proceedings before any of the courts having territorial jurisdiction under the French Code of Civil Procedure or before the court of the place where they resided at the time the contract was concluded or the harmful event occurred (Article R.631-3 of the French Consumer Code).

amazing-locks.com/en/terms-of-use/End of document · Terms of use

Privacy Policy

Last updated: · 15 articles

This policy describes how the personal data of users of the amazing-locks.fr website are collected, processed and protected, in accordance with Regulation (EU) 2016/679 and French Act No. 78-17 of 6 January 1978.

1.Purpose and scope

The purpose of this privacy policy (the “Policy”) is to inform users of the website available at amazing-locks.fr (the “Website”) of the conditions under which their personal data are collected, processed, stored and protected, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “GDPR”) and with French Act No. 78-17 of 6 January 1978 on information technology, data files and civil liberties, as amended (the “French Data Protection Act”).

It applies to all processing carried out in connection with the consultation and use of the Website, all its language versions, forms, messaging, client area and the electronic communications arising from them. It supplements the Website’s terms of use, of which it forms an integral part.

It does not apply to third-party services to which the Website links, in particular booking, payment, instant messaging services or social networks, which are governed by their own policies. Users are invited to read those policies before providing any data.

2.Definitions

For the purposes of the Policy, the terms below have the meaning given to them by Article 4 of the GDPR, in particular:

  • personal data (the “data”): any information relating to an identified or identifiable natural person, directly or indirectly;
  • processing: any operation or set of operations performed on data, such as collection, recording, organisation, storage, consultation, use, disclosure, combination, restriction, erasure or destruction;
  • controller: the person who determines the purposes and means of the processing;
  • processor: the person who processes data on behalf of the controller and on its documented instructions;
  • data subject or user: any natural person who visits the Website or whose data are processed in the course of its use;
  • tracker: any device reading or writing information in the user’s terminal within the meaning of Article 82 of the French Data Protection Act, in particular cookies and browser local storage.

3.Data controller

The data controller is AMAZING LOCKS, publisher of the Website, operating the Amazing Locks hair salon (the “Publisher”).

Any question relating to the Policy or to the processing of data may be sent to the Publisher through the Website’s contact form, stating the subject of the request.

Given the nature, scope and volume of the processing carried out, the Publisher is not required to appoint a data protection officer within the meaning of Article 37 of the GDPR.

4.Purposes and legal bases

Data are collected for specified, explicit and legitimate purposes and are not further processed in a manner incompatible with those purposes (Article 5(1)(b) GDPR). Each processing operation relies on one of the legal bases provided for in Article 6(1) GDPR:

  • handling requests sent through the contact form or the Website’s messaging, and booking, confirming, following up and reminding appointments, managing the client area and the waiting list: performance of pre-contractual measures or of the contract entered into with the data subject (Article 6(1)(b));
  • sending the newsletter about the salon’s news: consent of the data subject (Article 6(1)(a)), which may be withdrawn at any time;
  • sending follow-up messages linked to a service performed — advice on caring for locs, review request, invitation to book again — where enabled: the Publisher’s legitimate interest in following up its services (Article 6(1)(f)), under the conditions of Article L.34-5 of the French Postal and Electronic Communications Code, the data subject being entitled to object at any time;
  • audience measurement of the Website in aggregated form, and the security of the Website, in particular the prevention of abuse, automated submissions and intrusion attempts: the Publisher’s legitimate interest (Article 6(1)(f));
  • collection of payments, issuing of receipts and bookkeeping: performance of the contract (Article 6(1)(b)) and compliance with a legal obligation (Article 6(1)(c));
  • keeping evidence of exchanges and establishing, exercising or defending the Publisher’s legal claims: the Publisher’s legitimate interest (Article 6(1)(f)).

No decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them, is taken on the basis of the data collected (Article 22 GDPR).

5.Categories of data processed

Depending on the services used, the Publisher may process the following categories of data:

  • identification and contact data: first name, last name, e-mail address, telephone number, language of communication;
  • information relating to the request or the requested service: content of messages, description of the requested service, stated preferences, requested date, items and photographs provided voluntarily;
  • data relating to the client relationship: history of appointments and services, communication preferences, consents obtained and, where applicable, date of birth when the data subject chooses to provide it;
  • transaction data: amount, date, method and reference of the payment, excluding any bank card data, which the Website never collects;
  • connection and browsing data, processed in aggregated or pseudonymised form: pages viewed, language, approximate location, type of terminal, browser and operating system, referring website, network operator, timestamp; no IP address is stored;
  • authentication data: password, stored only as an irreversible encrypted hash and never in clear; time-limited sign-in link sent by e-mail; and, where the data subject chooses to sign in through a third-party service (Google or Apple, where the Website offers it), the e-mail address, the name, an identifier specific to that service and, where applicable, the profile picture provided by that service.

Data are collected directly from the data subject, or from the third-party service the data subject has chosen to use for authentication. Whether the information requested is mandatory is indicated at the time of collection; if it is not provided, the request cannot be handled.

The Website is not intended to collect special categories of data within the meaning of Article 9 GDPR, in particular data concerning health (article “Health data”). Users are asked not to provide such data through the contact form or the messaging.

6.Health data

The Website does not collect any data concerning health within the meaning of Article 9 GDPR: no health questionnaire is offered on it.

If users nevertheless provide such data of their own accord, in particular through the contact form or the messaging, it is used solely to answer their request. They may request its erasure under the conditions set out in the article on the rights of data subjects.

7.Recipients and processors

The data are intended for the Publisher, who alone is authorised to access them. They are not assigned, rented, sold or made available to third parties for commercial or advertising purposes.

They may be disclosed, strictly to the extent necessary for the performance of their tasks, to the following technical service providers, acting as processors within the meaning of Article 28 GDPR or, for services the data subject accesses directly, as separate controllers:

  • Cloudflare, Inc. (United States) — hosting of the Website, its databases and files; security and routing of connections (processor).
  • Brevo — Sendinblue SAS (France) — delivery of transactional e-mails and of the newsletter (processor).
  • Planity (France) — online booking service, the only way to book an appointment, reached through the “Book” button; the deposit is paid there. Data provided on that service are governed by its own policy (separate controller).
  • Google Ireland Limited (Ireland) — sign-in to the client area with a Google account (“Continue with Google” and, where the Publisher has enabled it, “Google One Tap” sign-in); Google provides the verified email address, first name, last name and profile photo of the account (separate controller for its sign-in service).

The e-mails and SMS messages relating to your appointments are sent by our service provider Brevo (Sendinblue SAS, France), which processes them solely on our behalf.

The data may also be disclosed to competent administrative or judicial authorities where required by law or upon a lawfully issued request.

8.Transfers outside the European Union

Some of the service providers mentioned in the article on recipients are established, or process data, outside the European Economic Area, in particular in the United States.

Any transfer of data to a third country is governed by Chapter V of the GDPR: either by an adequacy decision of the European Commission (Article 45), in particular, for certified companies, the decision of 10 July 2023 on the EU–US Data Privacy Framework; or, failing that, by standard contractual clauses adopted by the European Commission (Implementing Decision (EU) 2021/914 of 4 June 2021, Article 46), supplemented where necessary by additional measures.

The data subject may obtain further information on these safeguards by submitting a request under the conditions set out in the article on the rights of data subjects.

9.Retention periods

Data are kept for no longer than is necessary for the purposes for which they are processed (Article 5(1)(e) GDPR). The applicable periods are as follows:

Processing operations and retention periods
ProcessingCategories of dataPurpose and legal basisRetention period
Contact requestsIdentification and contact data; information relating to the request or the requested service.Handling of the request and follow-up of the relationship — pre-contractual measures (Art. 6(1)(b)).For as long as necessary to handle the request and follow up the relationship, then deletion or anonymisation, subject to statutory retention obligations.
Website messagingContent of the exchanges; identification and contact data provided voluntarily; aggregated browsing data.Answering questions and following up the exchanges — pre-contractual measures (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)).180 days from the last message, then automatic deletion.
Audience measurementConnection and browsing data, aggregated or pseudonymised; no IP address is stored.Traffic statistics and security of the Website — legitimate interest (Art. 6(1)(f)).395 days, then automatic deletion.
NewsletterE-mail address, first name where applicable, language; date of consent.Information about the salon’s news — consent (Art. 6(1)(a)).Until consent is withdrawn; the address of a person who has unsubscribed is kept on a suppression list so that their choice continues to be respected.
E-mail logRecipient address, nature, subject and language of the message, delivery status; the content of the message is not kept.Evidence and proper delivery of communications — legitimate interest (Art. 6(1)(f)).90 days, then automatic deletion.
Waiting listClient account identifier, requested date, service.Informing the registered person when a slot becomes available — pre-contractual measures (Art. 6(1)(b)).Until the requested date, then automatic deletion; the registration may be withdrawn at any time from the client area.
Client managementIdentification and contact data; data relating to the client relationship and services; communication preferences.Management of appointments, services and the client relationship — performance of the contract (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)).For the duration of the business relationship, then deletion or anonymisation once the data are no longer needed, subject to statutory retention obligations.
Health dataNone: the Website does not collect any data concerning health.Not applicable.Not applicable.
PaymentsTransaction data: amount, date, method and reference of the payment; no bank card data.Collection of payments and bookkeeping — performance of the contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)).Ten years, under accounting and tax obligations.

At the end of these periods, the data are deleted or irreversibly anonymised, subject to statutory retention obligations and applicable limitation periods, during which they may be placed in restricted-access intermediate archiving.

10.Security and confidentiality

In accordance with Articles 25 and 32 GDPR, the Publisher implements appropriate technical and organisational measures, having regard to the nature of the data and the risks presented by the processing, to ensure their security and confidentiality and, in particular, to prevent them from being altered, damaged or lost, or accessed by unauthorised third parties.

These measures include, in particular, encryption of communications, restriction and authentication of access, segregation of private items, minimisation of the data collected and automatic deletion of data whose retention period has expired.

In the event of a personal data breach, the Publisher makes, where required, the notifications provided for in Articles 33 and 34 GDPR.

Users contribute to the security of their data by keeping their password and the sign-in links sent to them confidential and by signing out of the client area after use on a shared device.

11.Rights of data subjects

In accordance with Articles 15 to 22 GDPR and within the conditions and limits laid down therein, every data subject has the following rights:

  • right of access (Article 15): to obtain confirmation as to whether or not data concerning them are being processed and, where that is the case, access to those data and a copy of them;
  • right to rectification (Article 16): to have inaccurate data rectified and incomplete data completed;
  • right to erasure (Article 17): to have their data erased, except where retention is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims;
  • right to restriction of processing (Article 18), in the cases provided for by that article;
  • right to data portability (Article 20): to receive the data they have provided in a structured, commonly used and machine-readable format, where the processing is based on consent or on a contract and carried out by automated means;
  • right to object (Article 21): to object at any time, on grounds relating to their particular situation, to processing based on legitimate interest and, without having to give reasons, to any processing for direct marketing purposes;
  • right to withdraw consent at any time (Article 7(3)), without affecting the lawfulness of processing based on consent before its withdrawal; every newsletter contains an unsubscribe link allowing this right to be exercised without formality;
  • right to give instructions regarding the retention, erasure and disclosure of their data after their death (Article 85 of the French Data Protection Act).

These rights are exercised through the Website’s contact form, stating the nature of the request. Where there is reasonable doubt as to the identity of the requester, the Publisher may request the additional information necessary to confirm it (Article 12(6) GDPR).

A reply is given within one month of receipt of the request; this period may be extended by two further months, taking into account the complexity and number of requests, in which case the data subject is informed (Article 12(3) GDPR). Exercising these rights is free of charge, unless the request is manifestly unfounded or excessive.

If, after contacting the Publisher, the data subject considers that their rights have not been respected, they may lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL), 3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07 — https://www.cnil.fr (Article 77 GDPR).

12.Cookies and other trackers

In accordance with Article 82 of the French Data Protection Act, the storing and reading of trackers in the user’s terminal are subject to prior consent, except for trackers whose sole purpose is to enable or facilitate communication by electronic means, or which are strictly necessary for the provision of a service expressly requested by the user.

The Website uses only trackers falling within that exception; it places no advertising, social-sharing, consent-based audience-measurement or cross-site tracking trackers. Accordingly, no consent needs to be collected. The trackers used are as follows:

  • mk_lang: remembers the language chosen by the user, placed only when a language is selected — duration: 1 year;
  • mk_lang_vu: remembers that the language-change suggestion has been shown, so that it is not shown again — duration: 6 months;
  • messaging local storage: keeps, in the browser, the identifier of the conversation started by the user, so that the thread can be found again; this identifier is not disclosed to any third party;
  • client area session cookie: keeps the authenticated user signed in; deleted on sign-out or on expiry.
  • “Google One Tap” sign-in: where the Publisher has enabled it, and only on the client area and booking page, that page loads a script provided by Google (accounts.google.com) which offers a user already signed in to a Google account in their browser to sign in with one tap; on that occasion Google may read or place its own trackers, in accordance with its privacy policy. No other page of the Website loads this script, and the user may ignore it and sign in with their password or a link received by email.

Users may at any time configure their browser to refuse or delete trackers; such refusal may, however, prevent the services to which they relate from working.

Audience measurement on the Website uses no tracker. The Website’s fonts, images and scripts are served from its own domain: loading them does not result in any data being disclosed to a third party, save only for the “Google One Tap” sign-in described above.

13.Minors

In accordance with Article 45 of the French Data Protection Act, a minor under the age of fifteen may not alone give consent to processing based on consent in relation to the offer of information society services directly to them; consent must then be given jointly by the minor and the holder or holders of parental authority.

Where the Publisher becomes aware that data have been provided by a minor without the required consent, it deletes them as soon as possible.

14.Changes to the Policy

The Publisher reserves the right to amend the Policy at any time, in particular to adapt it to legislative, regulatory or case-law developments, to the recommendations of the supervisory authority or to changes in the services offered.

The applicable version is the one published on the Website on the date it is consulted; the date of the latest update appears at the top of this document. Any substantial change affecting the purposes or legal bases of a processing operation is, where appropriate, brought to the attention of data subjects.

15.Governing law and jurisdiction

The Policy is governed by French law, subject to the mandatory provisions of European Union law, in particular the GDPR.

Any dispute relating to its interpretation or performance shall, failing amicable resolution, fall within the jurisdiction of the French courts determined according to the ordinary rules, without prejudice to the right of a data subject acting as a consumer to bring proceedings before the court of the place where they resided at the time the contract was concluded or the harmful event occurred (Article R.631-3 of the French Consumer Code), or to their right to lodge a complaint with the supervisory authority.

amazing-locks.com/en/privacy/End of document · Privacy

Cookies and other trackers

Last updated: · 8 articles

This document describes the cookies and other trackers placed on or read from the user’s device when consulting the amazing-locks.com website (the “Website”), in accordance with Article 82 of French Act No. 78-17 of 6 January 1978 and the guidelines of the French data protection authority (Commission nationale de l’informatique et des libertés). It forms an integral part of the Privacy Policy.

1.Definition

A tracker is any device for reading or writing information on the user’s device — computer, tablet or phone — in particular cookies and the browser’s local storage. It allows information to be kept from one page to the next or from one visit to the next.

2.Principle

In accordance with Article 82 of the French Data Protection Act, the storing and reading of trackers on the user’s device are subject to prior consent, except for trackers whose sole purpose is to enable or facilitate communication by electronic means, or which are strictly necessary for the provision of a service expressly requested by the user.

The Website uses only trackers covered by that exception; it places no advertising tracker, no audience-measurement tracker requiring consent and no cross-site tracking. Only the content provided by third-party services that the Website embeds — map, videos, social-media posts — may place their own trackers: such content is loaded only with the user’s prior consent, collected as described below.

3.Trackers used

The trackers used by the Website, their purpose and their retention period are as follows:

The Website’s trackers
NameType and purposeDuration
mk_langCookie — remembers the language chosen by the user; placed only when a language is selected.1 year
mk_lang_vuCookie — remembers that the language-change suggestion has been shown, so that it is not shown again.6 months
mk_compteSession cookie — keeps the authenticated client signed in to their Client Area.30 days at most; deleted on sign-out
mk_googleSecurity cookie — protects sign-in with a Google account against request forgery.10 minutes
mk_onetapSecurity cookie — single-use token for the “Google One Tap” sign-in, where the Publisher has enabled it.30 minutes
mk_adminSession cookie — keeps the Publisher, and the persons it authorises, signed in to the administration area; never placed on a visitor’s device.1 year at most; deleted on sign-out
mk_admin_ouvertTechnical cookie — tells the administration area that a session is open, so that the right screen is shown as soon as it loads; it grants access to nothing and is never placed on a visitor’s device.1 year at most; deleted on sign-out
mk_appareilSecurity cookie — recognises a device on which an administrator of the website has already confirmed their identity; it signs no one in and is never placed on a visitor’s device.400 days
mk_acces_defiSecurity cookie — protects, while it is being entered, the verification code requested from an administrator of the website when signing in; never placed on a visitor’s device.30 minutes
mk_porte_defiSecurity cookie — protects, while it is being checked, the sign-in of the website owner to the administration area; never placed on a visitor’s device.10 minutes
mk_appleSecurity cookie — protects sign-in with an Apple account against request forgery.10 minutes
Messaging local storageKeeps the identifier of the conversation started by the user, so that the thread can be found again.Until deleted by the user
Audience measurement session storageKeeps, for the duration of the visit, the tracking link or the website through which the user arrived, in order to count the visits and appointments each link brings; no data is kept from one visit to the next.Until the tab is closed
Announcements local storageRemembers that the user has closed an announcement, so that it is not shown again.Until deleted by the user
Client Area local storageRemembers the care steps ticked by the client; keeps, while signing in with a Google account, the appointment being booked and, for the time of the visit, the code of an offer received.Until deleted by the user; the appointment and code in progress, until the tab is closed
Workshop local storageRemembers the display preferences of the administration area — theme, text size, screen layout, folded sections, chosen calendar, recently opened files, the weekly summary kept — and, on this device, the state of notifications, of the app icon, of the messages already read and of the device type chosen for the preview of the chat; never placed on a visitor’s device.Until deleted by the user
Local storage of cookie choicesRemembers the choice made by the user in the cookie window, category by category, so that only the third-party content the user has accepted is loaded and the choice is not asked again before it expires.Six months

None of these trackers is disclosed to a third party. Session cookies are protected against being read by the page’s scripts and travel only over encrypted connections.

4.Sign-in with a Google account

Where the Publisher has enabled it, and only on the Client Area and booking page, the “Google One Tap” sign-in loads a script provided by Google (accounts.google.com) which offers a user already signed in to a Google account in their browser to sign in with one tap; on that occasion Google may read or place its own trackers, in accordance with its privacy policy.

No other page of the Website loads this script, and the user may ignore it and sign in with a code received by e-mail.

5.Third-party content and collection of consent

The Website may embed content provided by third-party services, grouped into three categories: “Map and directions” (Google Maps), “Videos” (YouTube, Vimeo) and “Social networks” (Instagram, TikTok, Facebook). When displayed, these services may read or place their own trackers, in accordance with their privacy policies.

None of this content is loaded before the user has expressed a choice: a window shown on the first visit allows the user to accept all or reject all, as easily as one another, or to choose category by category by means of the “Customise” button. Failing consent, each item of content is replaced by a frame stating its provider and allowing it to be displayed, that action constituting consent for its category only.

This choice is kept for six months in the browser’s local storage and then requested again; it may be changed at any time through the “Cookies” link at the bottom of every page. Refusal in no way prevents use of the Website.

6.Audience measurement and Website resources

Audience measurement on the Website places no cookie and does not follow the user from one visit to the next. It relies on aggregated connection data and, for the duration of the visit only, on the session storage described above; no IP address is kept, and the records are deleted automatically after 395 days.

The Website’s fonts, images and scripts are served from its own domain: loading them does not result in any data being disclosed to a third party, save only for the “Google One Tap” sign-in and the third-party content described above, which is loaded only with the user’s consent.

7.Browser settings

Users may at any time configure their browser to refuse or delete trackers; such refusal may, however, prevent the services to which they relate from working.

Most browsers make it possible to view, block or delete cookies and local storage from their privacy settings. Refusing the trackers described above may prevent the language from being remembered or prevent sign-in to the Client Area; the Website remains available.

8.Changes

Any tracker requiring consent that came to be used would be placed only after the user’s prior agreement had been obtained, through a mechanism allowing them to accept or refuse just as easily; this document would then be updated.

The date of the last update appears at the top of this document.

amazing-locks.com/en/cookies/End of document · Cookies